Skip to content
OpenAdvisories
High 3KXG200000R4801 1 CVE

CoreSense™ HM and CoreSense™ M10 File Path Traversal Vulnerability

Published Apr 16, 2025 · Updated Oct 20, 2025 · Revision 4

Summary

An update is available that resolves vulnerability in the product versions listed as affected in this advisory.

A path traversal vulnerability in these products can allow unauthenticated users to gain access to restricted directories. Exploiting this vulnerability can lead to complete system compromise and exposure of sensitive information.

Vulnerabilities 1

  • High 7.1
    CVE-2025-3465

    Path Traversal Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB CoreSense™ HM, ABB CoreSense™ M10.This issue affects CoreSense™ HM: through 2.3.1; CoreSense™ M10: through 1.4.1.12.

    ABB CoreSense™ HM CoreSense™ M10 ICS / OT

Revision history

  1. #4

    Final version with corrected dates.

  2. #3

    Fixed incorrect links.

  3. #2

    Addressed comments.

  4. #1

    Initial version.

References